[Snyk] Security upgrade critical from 0.8.4 to 4.0.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: critical

The new version differs by 250 commits.

• 34ed7c7 4.0.0
• 26e8b7c Bump dependencies
• 03d0455 Support web pages that use media=print for async CSS (#487)
• 712122d Bump ws from 6.2.1 to 6.2.2 (#500)
• 143c398 Adds node 16 to ci matrix
• c2b14d9 Removes link to changelog
• 6c14427 Removes minify option from readme
• fdd5705 Fix config test
• af99878 Fix linter
• f058e45 Bump inline-critical && fix tests
• 86aaa4a Removed minify option
• a5faf64 3.1.0
• d4599e0 npm audit fix
• 3ed099c Adds support for inline styles & data-uris (#498)
• 1fb431b Bump hosted-git-info from 2.8.8 to 2.8.9 (#493)
• 5fdc65f 3.0.1
• f3bd111 Bump dependencies (#492)
• b7d2e27 Fix: dedupe stylesheet hrefs found in document
• 3048d78 3.0.0
• 6b3e957 Bump dependencies (#483)
• 719cc52 Slice cssString in debug output
• 472eae6 2.0.6
• 0619caa Chore/bump deps (#472)
• 73b2a3b Do not mutate request.method when checking file exists (#470)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic